var BASE_URL = 'http://buildingprocess.com/widget/';
  var STYLESHEET = BASE_URL + "xss_magic.css"
  var ROOT = 'my_xss_magic';

function requestStylesheet(stylesheet_url) {
    stylesheet = document.createElement("link");
    stylesheet.rel = "stylesheet";
    stylesheet.type = "text/css";
    stylesheet.href = stylesheet_url;
    stylesheet.media = "all";
    document.lastChild.firstChild.appendChild(stylesheet);
  }



var str='';
str+='<div id="bp_widget">';
str+='<div id="bp_widheader">';
str+='<a href="http://www.buildingprocess.com" target="_parent"><img alt="BuildingProcess" title="BuildingProcess" src="http://buildingprocess.com/widget/logo.gif"/></a>';
str+='<\/div>';
str+='<div id="bp_rating">';
str+='<p>2 users have rated me on <a href="http://www.buildingprocess.com" target="_parent">BuildingProcess.com</a><\/p>';
str+='<p style="padding-bottom:0px;">Value: 5.0/5<br \/>';
str+='Quality: 5.0/5<br \/>';
str+='Service: 5.0/5<\/p>';
str+='<div id="bp_widfooter"><a href="http://www.buildingprocess.com/profile/30#comments">Rate My Company</a><\/div>';
str+='<\/div><\/div>';

requestStylesheet(STYLESHEET);
document.write(str);